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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH{S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply Is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 

- Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent temri adjustment. See 37 CFR 1.704(b). 

Status 

1 )n Responsive to comnnuniGation(s) filed on . 

2a)S This action is FINAL. 2b)n Tills action is non-final. 

3) n Since this application Is In condition for allowance except for formal matters, prosecution as to the merits is 

closed In accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 
Disposition of Claims 

4) S Claim(s) 1-18 is/are pending In the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) 0 Clalm(s) is/are allowed. 

6) ^ Clalm(s)li/8 Is/are rejected. 
?)□ Clalm(s) Is/are objected to. 

8) n Clalm(s) are subject to restriction and/or election requirement. 

Application Papers 

9) 0 The specification is objected to by the Examiner. 

10)n The drawlng{s) filed on is/are: a)n accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawlng(s) be held In abeyance. See 37 CFR 1 .85(a). 
1 1 )□ The proposed drawing correction filed on is: a)n approved b)n disapproved by the Examiner. 

If approved, corrected drawings are required In reply to this Office action. 

12) 0 The oath or declaration Is objected to by the Examiner. 
Priority under 35 U.S.C. §§ 119 and 120 

13) ^ Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 

a)IElAII b)n Some*c)D None of: 

1 Certified copies of the priority documents have been received. 

2. n Certified copies of the priority documents have been received In Application No. . 

3. n Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (POT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 

14) Q Acknowledgment Is made of a claim for domestic priority under 35 U.S.C. § 1 19(e) (to a provisional application). 

a) D The translation of the foreign language provisional application has been received. 

15) 0 Acknowledgment is made of a claim for domestic priority under 35 U.S.C. §§ 120 and/or 121. 
Attachment(s) 

1 ) □ Notice of References Cited (PTO-892) 4) □ Interview Summary (PTO-413) Paper No(s). . 

2) □ Notice of Draftsperson's Patent Drawing Review (PTO-948) 5) □ Notice of Informal Patent Application (PTO-1 52) 

3) □ Infomnation Disclosure Statement(s) (PTO-1449) Paper No(s) . 6) □ Other: 
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DETAILED ACTION 



Examiner's Note 



1 . The Examiner has pointed out particular references contained in the prior art of record in the body 
of this action for the convenience of the Applicant. Although the specified citations are representative of 
the teachings in the art and are applied to the specific limitations within the individual claims, other 
passages and figures apply as well. It is requested from the Applicant, in preparing the response, to 
consider fully the entire references as well as the context of all reference passages as potentially teaching 
all or part of the claimed inventions. 



Status of Claims 



2. Claims 1-18 remain pending. 

Claims 1-2 were amended as requested in the Amendment and Request for Consideration filed 
on 03 December 2002 under 37 CFR §1.111. 

Claims 15-18 were added as requested in the same Amendment and Request for Consideration. 



Response to Request for Reconsideration 

3. The Amendment and Request for Consideration filed on 03 December 2002 under 37 CFR § 
1.111 has been considered but is ineffective to overcome Schnecketai., US Patent No 5,933,498. 

Response to Arguments 



4. Applicant's arguments have been fully considered but they are not persuasive. 



As per claim 1 . 
Applicant argues that: 

(1) Applicant's invention is directed to a digital player device with the capability of generating an 
encrypting key based on an ID number of the data storage medium or the player device itself, and 

(2) Schneck only discloses encrypting and decrypting data at a distributor site, and that data 
encrypting keys are supplied to a user by the-distributor. 

Examiner disagrees with both points. In response to applicant's argument that Schneck fails to 
show certain features of applicant's invention, 
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(1) it is noted that the feature upon which applicant relies (i.e., "the encryption being generated in 
the digital data player device") was not recited in the rejected claims. Although the claim(s) are interpreted 
in light of the specification, limitations from the specification are not read into the claims. See In re Van 
Geuns, 988 F.2d 1181, 26 USPQ2d 1057 (Fed. Cir. 1993). 

(2) it is further noted that Schneck does show the exact feature upon which Applicant relies. In 
Fig 8, cited in the rejection of claim 1 , Schneck clearly is referring to an "access mechanism" (see 
Schneck, C9, LI 3: "Brief Description of the Drawings, Figs 8-9"). It is also clear throughout Schneck's 
disclosure that such "access mechanism" may be located in a user device (see Figs 1 , 5, 14, 15; 
associated text; Col 15, L19-38; Figs 8-12). An examination of Fig 8 shows [block] "168 Encryption 
Hardware". Lastly, Schneck does disclose that his access mechanism can generate encryption keys to 
encrypt protected data, such keys being derived from either the unique serial number of the data being 
supplied, the storage device, the user device, or a combination of any of those items (see Schneck: Col 
14, L32-50, also dted in the rejection of claim 1). 

Therefore, Schneck does teach that, depending on the application considered, either the 
distributor or the user device, or both, may be configured to generate encryption keys to encrypt and 
transmit protected data. 



As per claims 2-14 . 

Here again, Examiner disagrees with Applicant The Schneck citations used for the 35 USC § 
102(e) rejection of claim 1 and the 35 USC § 103(a) rejections of claims 2-14 clearly show that Schneck 
was very deliberate in teaching that: 

(1) the preferred embodiment of his invention would use encryption based on either numbers 
uniquely identifying the data to be protected itself, the unique IDs of the various parts of a user's device, 
or a combination thereof, with further participation of a trusted third party certification agency, if the 
application warrants all such measures, and 

(2) the encryption functions may be perfomned in any chosen device, whether at a content 
creator's site, distributor's site, or at an authorized user's site, without sacrificing any of the security 
measures centra! to his system and method; see Schneck: C28, L20-24: "..a standard computer" [i.e. a 
digital data playing device] "equipped with an access mechanism 1 14 will function as an 
authoring/distribution system". 

The motivation for setting up a system wherein a digital data playing device perfomns such 
encryption functions, as taught by Schneck, is therefore obvious: a very desirable, secure, hard to breach 
protection and control system for proprietary digital content, with no significant sacrifice in flexibility and 
ease of use. 



Claim Rejections - 35 USC § 102 



5. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that fomn the basis for 
the rejections under this section made in this Office action: 



A person shall be entitled to a patent unless - 
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(e) the invention was described in a patent granted on an application for patent by another filed in the 
United States before the invention thereof by the applicant for patent, or on an international application 
by another who has fulfilled the requirements of paragraphs (1 ), (2), and (4) of section 371 (c) of this 
title before the invention thereof by the applicant for patent. 

The changes made to 35 U.S.C. 102(e) by the American Inventors Protection Act of 1999 (AlPA) 
do not apply to the examination of this application as the application being examined was not (1) filed on 
or after November 29, 2000, or (2) voluntarily published under 35 U.S.C. 122(b). Therefore, this 
application is examined under 35 U.S.C. 102(e) prior to the amendment by the AlPA (pre-AlPA 35 U.S.C. 
102(e)). 



6. Claim 1 is rejected under 35 U.S.C. 102(e) as being anticipated by Schneck et al . US Patent No 
5,933,498, issued Aug 3, 1999 and filed on Nov 5, 1997. 

Schneck describes an apparatus for controlling access to digital data (Fig 1; Col 7, lines 8-55) 
with features and functionalities that meet all the limitations of claim 1 : 

[Amended] An apparatus for decrypting an encrypted digital data file (Schneck's "access 
mechanism"), comprising: 

a digital data playing device for receiving the encrypted digital data file, storing ttie encrypted 
digital data file in a data storage medium, and decrypting the stored digital data file using an 
encryption key (Fig 8; Col 15, lines 19-38; Figs 9-12), wherein 

the encryption key is generated in the digital data playing device on the basis of an identification 
number of the data storage medium or an identification number of the digital data playing device 
(Col 14, lines 32-50). 



Claim Rejections - 35 USC §103 



7. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all obviousness 
rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 



8. Claims 2-14 are rejected under 35 U.S.C. 103(a) as being unpatentable over Schneck. 



As per claim 2 : 

Schneck discloses that data distributed via his system may be protected by encrypting the data 
with a "data-encrypting key Kd". This Komay be the same for all copies of the packaged data. This Kd 
may be further encrypted by a "rules-encrypting key Kr", wherein Kr is unique to each version of the 
system or each receiving player/computer of each user (Fig 4; Col 12, lines 1-16). Schneck further 
discloses that the algorithms used in the generation and application of said encrypting keys might be 
selected from many established encryption algorithms, depending on the assessment of risks and degree 
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of protection of the data desired (Col 12, lines 27-48). Additionally, Schneck discloses that the serial 
number of a device may be used in the generation of his rules-encrypting key Kr (Col 14, lines 31-50). 

Schneck does not specifically disclose that infomnation regarding a manufacturing company 
should be included in the encryption key used to encrypt the data. 

However, Schneck teaches that effective protection of the data may be accomplished by 
encrypting the data and rules governing its access using various combinations of encryption keys, one of 
which may be specific to the intended user or device used to access the data. 

Therefore it would have been obvious for one ordinarily skilled in the art at the time the invention 
was made to have applied Schneck's teaching to create an apparatus wherein 

[Amended] . . .the encryption key includes information regarding a manufacturing company or a 
serial number of the data storage medium or the digital data playing device (i.e. Schneck's Kr). 

Such an embodiment would meet the limitations of claim 2, and would have been motivated by a 
desire to very specifically control access to data being distributed, according to each specific user or class 
of user (each user having bought a player device from a specific manufacturer, each such player uniquely 
identified by its serial number). 



As per claim 3 : 

As the references cited per claim 2 show, Schneck discloses that encryption keys used in his 
system may be derived using many different, well known encryption algorithms. Using additional arbitrary 
values in such encryption algorithms (i.e. semi-random or random numbers) is well known within the art. 
Therefore it would have been obvious to one ordinarily skilled in the art at the time the invention was 
made that a system could have been set up with 

the apparatus as set forth in claim 2, wherein the encryption key further includes an arbitrarily set 
value, 

for the purpose of making the transmitted encrypted data harder to crack thus better protected. 



As per claim 4 : 

Schneck discloses that the playing device in his system may be configured so that all data is 
protected by encryption within an "access mechanism" (Figs 8, 9, 10b, 11; Col 15, line 19 - Col 17, line 
33). 

Therefore it would have been obvious to one ordinarily skilled in the art at the time the invention 
was made to have set up an apparatus 

further comprising: a processor for decrypting a previously encrypted digital data file and 
reproducing the digital data file, or re-encrypting the decrypted digital data file using the 
encryption key and transmitting the re-encrypted digital data file to the digital data playing device. 

This would have been done to further protect the data from being misused or illegally intercepted, 
copied, or transmitted at the user's end. Even when being transmitted from a processor that received the 
data to a playing device, the data would be encrypted and thus protected. 
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As per claim 5 : 

In view of the Schneck references used per claims 1 and 2 above, it would have been obvious for 
one ordinarily skilled in the art at the time the invention was made to devise a method meeting the 
limitations of claim 5, namely: 

a method for encrypting or decrypting a digital data file, comprising adding a first internal key to 
an identification number of a digital data player or an identification number of a data storage 
medium associated therewith, thereby generating a first encryption key; and encrypting or 
decrypting the digital data file based on the first encryption key. 

Such a method would have been motivated by the desire to encrypt protected data based on (1) 
the nature of the data itself and (2) the specific access privileges granted to individual users or the 
devices they'll use for accessing the data. 



As per claim 6 : 

Similarly, using Schneck*s teachings as cited above, it would have been obvious for one ordinarily 
skilled in the art at the time the invention was made to have devised 

the method as set forth in claim 5, further comprising: encrypting the first encryption key using a 
second internal key to produce a second encryption key, wherein the encrypting or decrypting 
step includes encrypting or decrypting the digital data file using the second encryption key. 

This method would have been devised to further protect the integrity/safety of the key used in 
decrypting the data itself. In this fashion, first the data key would have to be decrypted using the second 
encrypting key, then the data itself may be decrypted using the data key. Such a method would result in a 
much stronger protection for the transmitted data and its access rules. 



As per claim 7 : 

Schneck discloses that data and rules governing the access to the data may be presented in any 
order, or in an interleaved fashion (Col 13, lines 54-63), and that packaged data may vary widely and be 
transmitted to users as single packaged entities or as continuous streams of data, along with appropriate 
access rules and decrypting keys (Col 15, lines 9-13). Schneck teaches that data and the controls to its 
access may vary widely, and that the transmission and protection of this data would have to be set up 
according to many differing parameters, based on the nature of the data, how many discrete parts it 
consists of, and what access controls apply to each such part. 

It would have been obvious to one ordinarily skilled in the art at the time the invention was made 
to apply Schneck's teachings to devise a method to safely and effectively deliver and control data with 
multiple usable parts. Such a method would utilize a plurality of keys to control each such part of the data, 
and as such, would meet the limitations cited in claim 7: 

the method as set forth in claim 5, wherein the adding step includes adding a plurality of internal 
keys to the identification number of a digital data player or the identification number of a data 
storage medium associated therewith. 



As per claim 8 : 
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In view of the same Schneck references cited as per claim 4 above, claim 8 is rejected: 

the method as set forth in claim 6, wherein the encrypting or decrypting step includes decrypting 
the digital data file using the second encryption key in a digital data playing device. 



As per claim 9 : 

In view of ttie same Schneck references cited as per claim 4 above, claim 9 is rejected: 

the method as set forth in claim 8, further comprising: encrypting raw data in a processor using 
the second encryption key to generate the digital data file; and transferring the digital data file to 
the digital data playing device 



As per claims 10-14 : 

Claims 10-14 are rejected in view of the Schneck references cited above for claims 1-9. A 
program embodied on computer-readable medium would have been inherent in a system, method and 
apparatus configured as specified in the above claims and would have met the limitations cited in claims 
10-14: 

10. A program (or script) embodied on a computer-readable medium for encrypting or decrypting a 
digital data file, the computer-readable-medium-embodied program comprising: 

a first program code segment to input an identification number of a digital data player or a data 
storage medium associated with the digital data player; 

a second program code segment to add a first internal key to the inputted identification number to 
convert the identification number into a first encryption key; and 

a third program code segment to encrypt or decrypt a digital data file based on the first encryption 
key. 

1 1. The program as set forth in claim 10, further comprising: a fourth program code segment to 
encrypt the first encryption key according to an encryption algorithm using a second internal key, 
wherein 

the third program code segment encrypts or decrypts the digital data file using the encrypted first 
encryption key, 

12. The program as set forth in claim 1 1, wherein the third program code segment encrypts the 
digital data file. 

13. The program as set forth in claim 12, wherein the fourth program code segment is 
substantially the same as the third program code segment. 

14. The program as set forth in claim 1 1, wherein the third program code segment decrypts the 
digital data file. 



As per claims 15-18 . 

Schneck does not specifically disclose all the apparatus and method steps as recited in claims 

15-18. 

However he does teach that: 
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(1) prior to encrypting the data to be protected, the authoring mechanisnn needs to obtain 
encryption key(s) derived from unique ID numbers, either of the data to be protected, various parts of the 
user's system (i.e. a manufacturer's ID number, a storage device ID number, or a computer chassis' serial 
number); (see the Schneck citations used for rejections of claim 1 and 2 above) 

(2) the encryption key(s) may be generated using any of a wide variety of encryption algorithms, 
as long as those algorithms are perfonmed on the unique ID numbers mentioned above (see all above 
citations); 

(3) the mechanism generating the keys may reside at a creator's site, a distributor's site, or a 
user's site (see all above citations); 

(4) the mechanism generating the key(s) needs to obtain these unique ID-derived keys, either 
from a certification agency, or from the user himself, in a secure, trustworthy fashion (see all above 
citations); 

(5) which methods to use among all the ones disclosed will be detemnined by the level of security 
desired for the data to be protected (see all above citations). 

As a result, it would have been obvious to one ordinarily skilled in the art at the time the invention 
was made to have applied Schneck's teachings to produce several embodiments of a digital data 
protection and delivery system as recited in claims 15-18. The motivation for each such system and/or 
method is as taught by Schneck: to provide strong, secure, yet flexible protection for protected data, while 
ensuring that the system and/or methods themselves remain easy to use and thus attractive for users. 
Specific embodiments of such systems would meet the limitations of claims 1 5-18: 

15. [NEW] An apparatus for decrypting an encrypted digital file, comprising: 
a digital data playing device for receiving the encrypted digital data file which has been encrypted 
by an encryption key from an external source, wherein the encryption key is generated in the digital data 
playing device on the basis of an identification number of a data storage medium associated with the 
digital data playing device or the digital data playing device, the encrypted digital data file is stored in the 
data storage medium, and the stored digital data file is decrypted using the encryption key. 

16. [NEW] A method for encrypting or decrypting a digital data file which has been encrypted or 
decrypted by an encryption key from an external source, wherein the encryption key is generated on the 
basis of an identification number of a data storage medium associated with a digital data playing device 
or the digital data playing device, the method comprising: 

adding a first internal key to the identification number of the digital data playing device or the data 
storage medium associated therewith, thereby generating a first encryption key; and 

encrypting or decrypting the digital data file based on the first encryption key. 

17. [NEW] An apparatus for decrypting an encrypted digital file, comprising: 

a digital data playing device for receiving the encrypted digital data file, storing the encrypted 
digital data file in a data storage medium, and decrypting the stored digital data file using an encryption 
key, 

wherein the encryption key is generated by combining a first internal key with an identification 
number of a digital data player or a digital data playing device, and is encrypted with a second internal 
key. 

18. [NEW] A method for encrypting or decrypting a digital data file, comprising: 

combining a first internal key to an identification number of a digital data player or data storage 
medium associated therewith and encrypting the combined result with a second internal key, thereby 
generating a first encryption key; and 
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encrypting or decrypting the digital data file based on the first encryption key. 



Conclusion 



9. 



Applicant's amendnnent necessitated the new ground(s) of rejection presented in this Office 



action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). Applicant is reminded of 
the extension of time policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE MONTHS from 
the mailing date of this action. In the event a first reply is filed within TWO MONTHS of the mailing date 
of this final action and the advisory action is not mailed until after the end of the THREE-MONTH 
shortened statutory period, then the shortened statutory period will expire on the date the advisory action 
is mailed, and any extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later than SIX 
MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications from the examiner should 
be directed to David Q Le whose telephone number is 703-305-4567. The examiner can nonmally be 
reached on 8:30am-5:30pm Mo-Fri. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, 
James P Trammel! can be reached on 703-305-9768. The fax phone numbers for the organization where 
this application or proceeding is assigned are 703-746-8494 for regular communications and 703-746- 
8494 for After Final communications. 

Any inquiry of a general nature or relating to the status of this application or proceeding should be 
directed to the receptionist whose telephone number is 703-308-1 113. 



February 24, 2003 



DQL 
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